Privacy Policy

1. Information about players

When you register for an event, the form collects what the organizer asks for:

• Name, email and phone.
• Date of birth, gender and shirt size, when the event uses them.
• For minors: the name of the parent or guardian who registers them.
• An optional photo, and whether you agree to it being used to promote the event.
• Your team's name and your teammates' details, when you register a team.
• Your registration: event, category, payment method, amounts, receipt number and status.
• The time and internet (IP) address from which you accepted the event's waiver, kept as evidence of that acceptance and to prevent abuse.
• The link you arrived from (for example ?ref=instagram), so organizers know which posts work, and your language.

2. Information about organizers

• Your email and password. Passwords are stored by our sign-in provider in a form no one can read.
• Your organization's name, contact email and phone, and your events' content.
• For card payouts, Stripe collects identity and bank details on its own pages; we don't see them.
• If you connect ATH Business, its access tokens are stored encrypted.

3. How we use it

• To run registrations and payments, and to send confirmations, payment instructions and reminders.
• To let organizers manage their events and contact their players.
• To prevent fraud and abuse, such as duplicate registrations and automated sign-ups.
• To handle refunds and payment disputes, and to meet legal and accounting obligations.

4. Who we share it with

• The organizer of the event you register for, who sees your registration details and photo to run the event.
• Your team captain and teammates, who can see the team's details through the team's registration link.
• Providers that run parts of the service for us: Supabase (database, sign-in and file storage), Vercel (hosting and anonymous visit statistics), Stripe (card payments and payouts), Evertec (ATH Móvil), Resend (email) and Cloudflare (the security check on the sign-up and sign-in forms). They may only use the information to provide their service.
• Authorities, when the law requires it.

5. Cookies

ZoneMVP uses only the cookies it needs to work: one that remembers your language, and, for organizers, the ones that keep you signed in. We don't use advertising or analytics cookies. We count visits to public pages (the page, country and type of device) with Vercel Web Analytics, which uses no cookies and doesn't identify you; private links are removed before anything is counted. Stripe sets its own cookies on its payment page.

6. How long we keep it

• Registrations are kept while organizers need them and for as long as payment, tax and dispute rules require.
• Photos no player uses anymore are deleted automatically.
• Records used to limit uploads (with IP addresses) are deleted within a day.

7. Your choices and rights

• You can see and change your details from your registration link until the organizer's deadline.
• To get a copy of your information, correct it, delete it or withdraw your photo consent, write to info@zonemvp.com. We answer within 30 days.
• Some information must be kept for payment, tax or legal reasons even after you ask us to delete it; we'll tell you if that applies.

8. Children

Minors are registered by a parent or guardian, whose name is recorded with the registration. We don't knowingly let children under 13 register themselves.

9. Security

Connections to ZoneMVP are encrypted, access to information is limited to those who need it, and sensitive credentials are stored encrypted. No system is perfectly secure, but we work to protect your information and will tell you if a breach affects it.

10. Where it's stored

Your information is stored and processed in the United States.

11. Changes and contact

If we change this policy in a way that matters, we'll update this page and the date at the top.

Questions or requests: info@zonemvp.com, or by mail to Erakode LLC, 151 Calle San Francisco, Suite 200, San Juan, PR 00901.